CVE-2005-3269

Published: Oct 20, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.

Affected (20)

Products: Sun: Java System Directory Proxy Server, Java System Directory Server, One Administration Server, One Directory Server

4 products

Java System Directory Proxy Server

Java System Directory Server

One Administration Server

One Directory Server

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Sun Java System Directory Proxy Server	Version 5.2 2003q4
Sun Java System Directory Proxy Server	Version 5.2 2004q2
Sun Java System Directory Proxy Server	Version 5.2 2005q1
Sun Java System Directory Server	Version 5.2
Sun Java System Directory Server	Version 5.2 2003q4
Sun Java System Directory Server	Version 5.2 2004q2
Sun Java System Directory Server	Version 5.2 2005q1
Sun One Administration Server	Version 5.2
Sun One Directory Server	Version 4.16
Sun One Directory Server	Version 4.16 sp1
Sun One Directory Server	Version 5.0
Sun One Directory Server	Version 5.0 sp1
Sun One Directory Server	Version 5.0_sp2
Sun One Directory Server	Version 5.1
Sun One Directory Server	Version 5.1
Sun One Directory Server	Version 5.1 sp1
Sun One Directory Server	Version 5.1 sp2
Sun One Directory Server	Version 5.1 sp3
Sun One Directory Server	Version 5.1 sp3
Sun One Directory Server	Version 5.1 sp4

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (34)

http://marc.info/?l=bugtraq&m=112862037500012&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=113815459026080&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/17092

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/18590

Source: secalert@redhat.com

Vendor Advisory

http://securityreason.com/securityalert/367

Source: secalert@redhat.com

http://securityreason.com/securityalert/51

Source: secalert@redhat.com

http://securitytracker.com/id?1015014

Source: secalert@redhat.com

http://securitytracker.com/id?1015536

Source: secalert@redhat.com

http://securitytracker.com/id?1015537

Source: secalert@redhat.com

http://securitytracker.com/id?1015538

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1

Source: secalert@redhat.com

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1

Source: secalert@redhat.com

http://www.securityfocus.com/bid/15013

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16345

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2005/1988

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24311

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=112862037500012&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=113815459026080&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17092

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/18590

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/367

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/51

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015014

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015536

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015537

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015538

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15013

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16345

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/1988

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24311

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.